Thanks, Dave, but time sync doesn't appear to be an issue. The official
instructions' tests to see whether SRV records work.
On the Windows side, if I attempt to create a trust, it throws the error:
"The Local Security Authority is unable to obtain an RPC connection to the Active
Directory Domain Controller XXX. Please check that the name can be resolved and that the
server is available."
So I guess I'm still a little confused.
---
Justin Smith
IT Analyst
MIM Software, Inc.
[
https://www.mimsoftware.com/ |
https://www.mimsoftware.com ]
----- Original Message -----
From: "freeipa-users" <freeipa-users(a)lists.fedorahosted.org>
To: "freeipa-users" <freeipa-users(a)lists.fedorahosted.org>
Cc: "David McDaniel" <dmac1guru(a)gmail.com>
Sent: Thursday, November 9, 2017 11:51:41 AM
Subject: [Freeipa-users]Re: Trouble with AD Trust
Hello Justin,
While waiting on a response from the more experienced on here than I.
I would double check time sync is correct between AD DC and IPA DC.
Also;
The AD DC will do a _srv_ record lookup for the IPA DC then attempt connection to the
Samba instance on said IPA DC from my understanding. So double check DNS from AD
perspective as well. Hope that helps.
-Dave
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org